Support Incident Tracker (SiT!) 3.63 p1 - search.php?search_string SQL Injection

Support Incident Tracker SiT! 3.63 p1 - search.php?searchstring SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in ...

Support Incident Tracker (SiT!) 3.63 p1 - tasks.php?selected[] SQL Injection

Support Incident Tracker SiT! 3.63 p1 - tasks.php?selected SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQ...

CobraScripts Trading Marketplace Script - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/48914/info Trading Marketplace script is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Synergy Software - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48805/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Joomla! Component Controller - 'Itemid' SQL Injection

source: https://www.securityfocus.com/bid/48690/info The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Joomla! Component Controller - Itemid SQL Injection

Joomla! Component Controller - Itemid SQL Injection source: https://www.securityfocus.com/bid/48690/info The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Joomla! Component Juicy Gallery - picId SQL Injection

Joomla! Component Juicy Gallery - picId SQL Injection source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Easy Estate Rental - 's_location' SQL Injection

source: https://www.securityfocus.com/bid/48684/info Easy Estate Rental is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acce...

Auto Web Toolbox - id SQL Injection

Auto Web Toolbox - id SQL Injection source: https://www.securityfocus.com/bid/48683/info Auto Web Toolbox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker t...

Joomla! 'com_resman' Component Cross Site Scripting Vulnerability

Joomla! 'comresman' Component Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48692/info The 'comresman' component for Joomla! is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. ...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Alice Modem 1111 - 'rulename' Cross-Site Scripting / Denial of Service

source: https://www.securityfocus.com/bid/48642/info The Alice Modem is prone to a cross-site scripting vulnerability and a denial-of-service vulnerability because the device fails to properly handle user-supplied input. An attacker may leverage these issues to cause a denial-of-service condition...

WebCalendar Multiple Cross Site Scripting Vulnerabilities

This host is running WebCalendar and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbwebcalendarmultxssvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ WebCalendar Multiple Cross Site Scripting Vulnerabilities Authors: Shashi Kiran N Copyright: Copyright c...

Joomla! Component com_jr_tfb - Controller Local File Inclusion

Joomla! Component comjrtfb - Controller Local File Inclusion source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabili...

Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48471/info Joomla! CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute...

ManageEngine ServiceDesk Plus FileDownload.jsp FILENAME Parameter Traversal Arbitrary File Access

The installed version of ManageEngine ServiceDesk Plus fails to sanitize user-supplied input to the 'FILENAME' parameter of the 'workorder/FileDownload.jsp' script of directory traversal sequences when 'module' is set to 'agent' before using it to return the contents of a file. An unauthenticated...

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48455/info Mambo CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the...